Case Study: After a STA Connects to an SSID and Opens a Browser, the Portal Authentication Page Is Not Displayed

Symptom

After a STA successfully connects to an SSID and opens a browser, the Portal authentication page cannot be displayed.

Relevant Alarms and Logs

None

Cause Analysis

After the IP address of the Portal page is manually entered in the browser of the STA, the Portal authentication page is displayed. This indicates that the authentication-free rule does not bypass authentication for the DNS server. Before successful authentication, users can access some network resources that are permitted by the authentication-free rule. However, you need to bypass the DNS server to resolve the domain name. Otherwise, the domain name cannot be resolved. The fault can be rectified after authentication for the DNS server is bypassed.

Procedure

1. Add the DNS server to the authentication-free resource. The configuration is as follows:

   <AC> system-view
   [AC] free-rule-template name default_free_rule  
   [AC] free-rule 1 destination ip 8.8.8.8 mask 255.255.255.255

Suggestion and Summary

During the Portal authentication configuration, configure an authentication-free rule to bypass authentication for the DNS server. Otherwise, the domain name cannot be resolved.